Management responsibilities
A.5.4
-
Last updated
Applicable
Catalog reference
Management must actively require personnel and contractors to apply information security in line with policies and procedures, and must visibly support the security program.
Narrative — how we satisfy this requirement
The Management Board expects every manager to apply the security rules in their team, and managers discuss security in their monthly team meeting.
None due within 31 days.